Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145653.roa
File: AS145653.roa (raw, json)
Hash identifier: iCz6WjBPTyCqup8P3qPKQW1/xOuq+M8L3Gof8diqpeo=
Subject key identifier: 20:28:C0:2C:DE:F0:B8:13:5F:1E:70:28:A0:11:46:D6:79:80:67:AC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 55B88100E6F5FD7D305908CF3BE2E51C1A0C1CEB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145653.roa
Signing time: Fri 22 May 2026 07:41:05 +0000
ROA not before: Fri 22 May 2026 07:36:05 +0000
ROA not after: Fri 21 May 2027 07:41:05 +0000
asID: 145653
IP address blocks: 240a:abbb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b8:81:00:e6:f5:fd:7d:30:59:08:cf:3b:e2:e5:1c:1a:0c:1c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:05 2026 GMT
Not After : May 21 07:41:05 2027 GMT
Subject: CN=2028C02CDEF0B8135F1E7028A01146D6798067AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:0e:be:39:94:be:c8:3d:88:56:4d:ce:83:
4e:09:01:1c:0c:88:b4:b4:03:fb:99:46:30:a5:51:
16:a6:cb:96:7a:86:b9:5f:50:81:db:f6:c9:b7:d2:
ee:71:04:31:48:91:71:ec:3d:f9:6f:c9:cc:2f:07:
f5:6c:06:5e:e0:33:af:f2:ba:3f:ad:3a:02:ff:48:
2f:ab:39:38:0d:4e:14:89:1e:d4:a8:3f:88:e0:5d:
ac:65:2d:0d:19:32:c8:92:ba:d2:58:8c:17:a6:1c:
c6:7d:17:39:8e:7a:22:3c:f4:56:9e:e8:2d:0b:34:
08:b7:be:09:04:2e:d4:96:a5:99:ed:e2:6e:9b:95:
35:2f:f2:14:de:70:9e:ea:bc:12:7f:ee:40:b2:b0:
a1:1b:81:c8:88:54:67:d0:2c:11:f3:dc:6e:c2:3c:
eb:e3:b6:23:85:9d:af:82:95:41:3e:4d:7c:3a:e3:
be:83:7e:21:c3:04:67:fb:96:fd:e0:aa:c4:ca:26:
be:1c:aa:40:03:0a:65:eb:59:03:b9:f2:81:a8:3a:
7b:c0:f5:0b:de:04:4f:bd:79:d1:6c:51:e3:7a:d6:
9b:0c:b3:8c:53:21:ff:af:4a:3d:4a:a1:a5:df:b0:
73:63:1f:fd:4a:0d:43:92:63:57:47:00:98:2b:9d:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:28:C0:2C:DE:F0:B8:13:5F:1E:70:28:A0:11:46:D6:79:80:67:AC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145653.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abbb::/32
Signature Algorithm: sha256WithRSAEncryption
a1:96:70:f0:6e:83:d6:0a:28:3f:1b:2f:bc:fa:88:f2:bd:10:
5c:7d:3f:31:6f:40:51:3a:d4:8d:15:5f:a8:1c:e2:94:74:d8:
37:9e:91:3f:16:f0:c7:9e:3c:bb:fd:e6:7b:6c:e8:07:98:0e:
4b:aa:5d:95:1e:a1:c8:27:2f:d7:14:2d:24:80:a9:0e:1b:c4:
5c:f5:9d:ba:c8:37:85:96:2c:d7:07:11:ef:1f:2c:56:f0:36:
99:44:08:a3:09:e3:26:51:50:bd:b7:80:42:06:c3:ea:90:f9:
4d:15:40:f6:19:9f:a5:c6:c2:6d:29:2a:f6:f9:49:e8:66:1c:
1e:70:c3:49:9e:da:de:ea:c7:b5:d8:f2:77:59:2c:ee:08:3d:
c4:ed:e8:38:d7:69:67:b1:1d:7d:e9:38:d1:66:ce:89:02:4f:
98:84:32:75:9b:0a:0c:51:1e:b6:e2:9c:d1:a0:48:3a:0a:b3:
d6:2a:e7:2c:05:ca:45:e1:f3:c6:c9:0b:de:48:a0:da:8c:b2:
e5:d2:71:dd:8e:12:64:dc:aa:9a:a2:5c:72:2e:5e:d8:81:95:
d3:2c:4a:fc:87:ba:42:67:0a:e3:69:e5:71:44:c0:cf:e6:4f:
bd:16:a1:bd:45:16:5c:bb:e9:a5:16:06:aa:ff:4a:ad:be:d7:
d6:4b:36:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:22 2026 by rpki-client